https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T22:06:05.402555+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-772 certfr-2021-avi-772 — De multiples vulnérabilités ont été découvertes dans les produits Schneider. Certaines d'entre elles permettent à un at… 2026-10-15T22:06:05.485864+00:00 certfr-2021-avi-772 https://cve.radiocsirt.org/vuln/cnvd-2022-13073 cnvd-2022-13073 2026-10-15T22:06:05.485925+00:00 cnvd-2022-13073 https://cve.radiocsirt.org/vuln/euvd-2026-23174 EUVD-2026-23174 2026-10-15T22:06:05.485942+00:00 EUVD-2026-23174 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22805 fkie_cve-2021-22805 2026-10-15T22:06:05.485955+00:00

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

 https://cve.radiocsirt.org/vuln/ghsa-px95-pcrx-64c4 GHSA-px95-pcrx-64c4 2026-10-15T22:06:05.485986+00:00

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

 https://cve.radiocsirt.org/vuln/gsd-2021-22805 gsd-2021-22805 2026-10-15T22:06:05.486003+00:00 gsd-2021-22805 https://cve.radiocsirt.org/vuln/icsa-21-285-03 ICSA-21-285-03 — Schneider Electric IGSS 2026-10-15T22:06:05.486014+00:00

The affected product is vulnerable to remote code execution, due to missing length check on user supplied data, when a constructed message is received on the network.CVE-2021-22802 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). By sending constructed messages on the network, an attacker could write arbitrary files to folders in context of the DC module that could lead to remote code execution.CVE-2021-22803 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An issue exists that could allow disclosure and read access of arbitrary files in the context of the user running IGSS, due to missing validation of user supplied data in network messages.CVE-2021-22804 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). An issue exists that could allow disclosure and read access of arbitrary files in the context of the user running IGSS, due to missing validation of user supplied data in network messages.CVE-2021-22805 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).

 https://cve.radiocsirt.org/vuln/sevd-2021-285-03 SEVD-2021-285-03 — IGSS (Interactive Graphical SCADA System) 2026-10-15T22:06:05.486047+00:00

Schneider Electric is aware of multiple vulnerabilities in its Data Collector module for IGSS (Interactive Graphical SCADA System) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS communicates with all major industry standard PLC drivers. Failure to apply the remediations provided below may risk remote code execution, which in worst case could result in an attacker gaining access to the Windows Operating System on the machine running IGSS in production.